CS449 Study Guide Questions With
Correct Answers
What data was leaked in the Equifax breach? - CORRECT ANSWER✔✔-
| | | | | | | | | |
Personal data of 145 million people
| | | | |
What was the nature of the Equifax vulnerability? - CORRECT
| | | | | | | | | |
ANSWER✔✔-A vulnerability in the Apache Struts Server software | | | | | | |
What was the specific attack vector in the Equifax hack? - CORRECT
| | | | | | | | | | | |
ANSWER✔✔-The parser had incorrect exception handling during file | | | | | | | |
uploads
To what extent was information about the Struts vulnerability known
| | | | | | | | | |
before the attack? - CORRECT ANSWER✔✔-They knew a patch needed
| | | | | | | | | |
to be applied to the Apache software and was supposed to be applied
| | | | | | | | | | | | |
within 48 hours | |
Was Equifax aware that a patch was available? If so, how much time did
| | | | | | | | | | | | | |
they delay in applying the patch? - CORRECT ANSWER✔✔-They knew of
| | | | | | | | | |
the vulnerability 3 months before they were compromised and applied
| | | | | | | | | | |
the patch after they were compromised
| | | | |
, What was the educational background of the Equifax CIO? - CORRECT
| | | | | | | | | | |
ANSWER✔✔-Degree in Russian History | | |
What was the educational background of the Equifax CISO? - CORRECT
| | | | | | | | | | |
ANSWER✔✔-Degree in Music Composition | | |
Describe the "too big to fail era". - CORRECT ANSWER✔✔-Certain
| | | | | | | | | |
corporations are so large that their failure would be disastrous to the
| | | | | | | | | | | |
greater economic system, so they must be supported by the
| | | | | | | | | |
government when facing failure | | |
Are credit reporting companies held liable for PII data loss? - CORRECT
| | | | | | | | | | | |
ANSWER✔✔-No
Define the visible web. - CORRECT ANSWER✔✔-Accessible by http and
| | | | | | | | | |
indexed by search engines
| | |
Define the deep web. - CORRECT ANSWER✔✔-Accessible by http but
| | | | | | | | | |
not indexed by search engines
| | | |
Define the dark web. - CORRECT ANSWER✔✔-Designed to be concealed
| | | | | | | | |
from search engines and casual web users
| | | | | | |
Correct Answers
What data was leaked in the Equifax breach? - CORRECT ANSWER✔✔-
| | | | | | | | | |
Personal data of 145 million people
| | | | |
What was the nature of the Equifax vulnerability? - CORRECT
| | | | | | | | | |
ANSWER✔✔-A vulnerability in the Apache Struts Server software | | | | | | |
What was the specific attack vector in the Equifax hack? - CORRECT
| | | | | | | | | | | |
ANSWER✔✔-The parser had incorrect exception handling during file | | | | | | | |
uploads
To what extent was information about the Struts vulnerability known
| | | | | | | | | |
before the attack? - CORRECT ANSWER✔✔-They knew a patch needed
| | | | | | | | | |
to be applied to the Apache software and was supposed to be applied
| | | | | | | | | | | | |
within 48 hours | |
Was Equifax aware that a patch was available? If so, how much time did
| | | | | | | | | | | | | |
they delay in applying the patch? - CORRECT ANSWER✔✔-They knew of
| | | | | | | | | |
the vulnerability 3 months before they were compromised and applied
| | | | | | | | | | |
the patch after they were compromised
| | | | |
, What was the educational background of the Equifax CIO? - CORRECT
| | | | | | | | | | |
ANSWER✔✔-Degree in Russian History | | |
What was the educational background of the Equifax CISO? - CORRECT
| | | | | | | | | | |
ANSWER✔✔-Degree in Music Composition | | |
Describe the "too big to fail era". - CORRECT ANSWER✔✔-Certain
| | | | | | | | | |
corporations are so large that their failure would be disastrous to the
| | | | | | | | | | | |
greater economic system, so they must be supported by the
| | | | | | | | | |
government when facing failure | | |
Are credit reporting companies held liable for PII data loss? - CORRECT
| | | | | | | | | | | |
ANSWER✔✔-No
Define the visible web. - CORRECT ANSWER✔✔-Accessible by http and
| | | | | | | | | |
indexed by search engines
| | |
Define the deep web. - CORRECT ANSWER✔✔-Accessible by http but
| | | | | | | | | |
not indexed by search engines
| | | |
Define the dark web. - CORRECT ANSWER✔✔-Designed to be concealed
| | | | | | | | |
from search engines and casual web users
| | | | | | |
